Bro v2.3.1 has been released.  This release addresses a potential DOS vector using specially crafted DNS packets.  It also fixes a bug in the OCSP validation code that could lead to crashes as well as a memory leak.  The source distribution and binary packages are available on our downloads page.

See CHANGES for the full commit list.

Since this release addresses a bug fix, we encourage users to review and install at their earliest convenience.

Feedback is encouraged and should be sent to the Bro mailing list.

The Bro Team

%d bloggers like this: